In the Claims 



Claims are amended as follows: 

1 . (currently amended) A method of controlling one of a plurality of middleboxes 
in a communications network, each of the middleboxes being connected to a plurality 
of entities in an address realm of the communications network, said method 
comprising the steps of> 

(i) receiving a control message at a middlebox-identity-providing 
node in the communications network, said control message 
comprising information about one of the entities in the 
communications network; 

(ii) using the middlebox identity providing node to determine the 
identity of a first middlebox connected to said one entity; 

(iii) sending said identity to a middlebox control node in the 
communications network in order to enable said middlebox 
control node to control said first middlebox; 

and wherein the middlebox-identity-providing node is separate 
from the middlebox control node and is mor e dir e ct l y connected 
closer in said communications network to said one of the entities 
than the middlebox control node. 

2. (original) A method as claimed in claim 1 wherein said step (iii) of sending said 
identity comprises adding said identity to a control message and sending said control 
message. 
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3. (original) A method as claimed in claim 2 wherein additional information is also 
added to the control message. 

4. (original) A method as claimed in claim 2 wherein said control message is a 
session description protocol (SDP) message. 

5. (original) A method as claimed in claim 4 wherein said identity is added to an 
SDP message using a pre-specified SDP attribute. 

6. (currently amended) A method as claimed in claim 1 wherein said control 
message is a call set-up message and said method i s arranged to control further 
comprises controlling said first middlebox in order to set-up a call from said one 
entity to another entity connected to a second middlebox in the communications 
network. 

7. (original) A method as claimed in claim 6 wherein said second middlebox is 
connected to a plurality of entities in a second address realm different from the first 
address realm of the entities connected to the first middlebox. 

8. (original) A method as claimed in claim 7 wherein the middlebox control node is 
within a third address realm different from the first and second address realms. 

9. (original) A method as claimed in claim 8 wherein the third address realm is 
public. 

10. (original) A method as claimed in claim 9 wherein the first and second address 
realms are private. 

11. (currently amended) A method as claimed in claim 1 wherein the middlebox- 
identity-providing node is selected from: one of the middleboxes; a gateway in the 
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communications network; said one entity, being a user terminal in the 
communications network; and a gateway comprising a business services channel 
manager (BSCM). 

12. (original) A method as claimed in claim 6 wherein said call passes through two 
or more middleboxes and wherein information about the identity of each such 
middlebox is added to said control message. 

13. (original) A method as claimed in claim 1 wherein said middlebox control node is 
a MIDCOM agent. 

14. (cancelled). 

15. (original) A method as claimed in claim 1 wherein each of the middleboxes is 
selected from a firewall, a network address translator (NAT), and a quality of service 
device. 

16. (original) A method as claimed in claim 1 wherein said middlebox-identity- 
providing node is arranged to determine the identity of the first middlebox by using 
pre-specified information. 

17. (original) A method as claimed in claim 1 wherein said middlebox-identity- 
providing node is arranged to determine the identity of the first middlebox by 
automatically analysing the communications network. 

18. (currently amended) A communications network comprising: 

(i) a plurality of middleboxes, each connected to a plurality of entities 
in an address realm of the communications network; 
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(ii) a middlebox-identity-providing node arranged to receive a control 
message comprising information about one of the entities and to 
determine the identity of a first middlebox connected to said one 
entity; 

(iii) a middlebox control node arranged to receive the determined 
identity of the first middlebox in order to enable said middlebox 
control node to control said first middlebox; said middlebox-identity- 
providing node being separate from the middlebox control node and 
being mor e dir e ctly connected closer in said communications 
network to said one of the entities than the middlebox control node. 

19. (original) A communications network as claimed in claim 18 wherein said 
middlebox-identity-providing node is further arranged to send said determined 
identity to the middlebox control node as part of a control message. 

20. (original) A communications network as claimed in claim 19 wherein said control 
message is a session description protocol message. 

21 . (currently amended) A propagated signal comprising data representing a 
session description protocol message comprising an attribute containing information 
about the identity of a middlebox. 

22. (currently amended) A propagated signal as claimed in claim 21 wherein said 
information about the identity of a middlebox is selected from a fully-qualified domain 
name (FQDN) and an internet protocol address. 

23. (original) A middlebox control node arranged to control a plurality of middleboxes 
in a communications network, said middlebox control node comprising: 
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(i) an input arranged to receive a control message comprising 
information about the identity of one of the middleboxes; 

(ii) a processor arranged to issue messages to the identified 
middlebox in order to control it; such that in use the middlebox 
control node is able to control the identified middlebox without 
the need to maintain its own store of information about the 
identities of the middleboxes and without the need to maintain 
its own discovery mechanism to discover the identities of the 
middleboxes. 

24. (currently amended) A middlebox-identity-providing node for use in a 
communications network comprising a plurality of middleboxes, said middlebox 
identity providing node comprising: 

(i) an input arranged to receive a control message comprising 
information about one of a plurality of entities in the 
communications network; 

(ii) a processor arranged to determine the identity of a first 
middlebox connected to said one entity; 

(iii) an output arranged to send said identity to a middlebox control 
node in the communications network; and wherein said 
middlebox-identity-providing node is arranged to be mor e 
dir e ct l y connected closer in said communications network to 
said one of the entities than the middlebox control node. 

25. (currently amended) A computer program arranged to control a middlebox 
control node as c l aim e d in c l a i m 23 , said middlebox control node comprising an 
input arranged to receive a control message comprising information about the 
identity of one of the middleboxes; and a processor arranged to issue messages to 
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the identified middlebox in order to control it; such that in use the middlebox control 
node is able to control the identified middlebox without the need to maintain its own 
store of information about the identities of the middleboxes and without the need to 
maintain its own discovery mechanism to discover the identities of the middleboxes; 

the computer program comprising program code executable by the processor 

in order to enable the middlebox control node to: 

receive a control message comprising information about the 
identity of one of the middleboxes; and to 

issue messages to the identified middlebox in order to control it. 

26. (original) A computer program as claimed in claim 25 which is stored on a 
computer readable medium. 

27. (currently amended) A computer program arranged to control a middlebox- 
identity-providing node as claim e d i n cla i m 2 4 , said middlebox identity providing 
node comprising an input arranged to receive a control message comprising 
information about one of a plurality of entities in the communications network; a 
processor arranged to determine the identity of a first middlebox connected to said 
one entity; and an output arranged to send said identity to a middlebox control node 
in the communications network; and wherein said middlebox-identity-providing node 
is arranged to be closer in said communications network to said one of the entities 
than the middlebox control node; 

the computer program comprising program code executable by the processor 

in order to enable the middlebox identity-providing node to : 

receive a control message comprising information about one of a 
plurality of entities in the communications network; 

determine the identity of a first middlebox connected to said one 
entity; and 
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- send said ono entity middlebox identity to a middlebox control node 
in the communications network. 

28. (original) A computer program as claimed in claim 25 which is stored on a 
computer readable medium. 
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